<!--

This test is mostly a copy of layout/forms/crashtests/373586-1.xhtml,
and it makes sure that the value setter works correctly when setting
the value causes the frame to be reconstructed.

-->
<html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
<head>

<bindings xmlns="http://www.mozilla.org/xbl">
  <binding id="foo">
    <content>
      <children xmlns="http://www.mozilla.org/xbl" />
    </content>
  </binding>
</bindings>

<script>
function boom()
{
  document.getElementById("div").style.MozBinding = "url('#foo')";

  var opt1 = document.getElementById("opt1");
  opt1.removeChild(opt1.firstChild);

  document.getElementById("textarea").value += " y";

  document.getElementById("div").style.MozBinding = "";
  document.documentElement.removeAttribute("class")
}

window.addEventListener("MozReftestInvalidate", boom, false);
</script>

</head>

<body>

<div id="div">
  <textarea rows="3" cols="5" id="textarea">x</textarea>
</div>

<select style="-moz-appearance:none">
  <option id="opt1">opt1</option>
</select>

</body>
</html>

